Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft
File:                     1LOfyKU74dxnS22nVehhEJUhdOQ.mft (raw, json)
Hash identifier:          39JwEe6HuTgetJH/fp2hhzJSZiKLeBTWdGpNBb7bhCI=
Subject key identifier:   54:B5:30:F6:E9:B9:C3:F2:B8:5E:82:81:0B:7B:E5:3F:87:74:1A:BE
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Certificate issuer:       /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial:       018F28A8157B6A837CD627C4F7A2956D6EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft
Manifest number:          1154
Signing time:             Mon 29 Apr 2024 07:00:55 +0000
Manifest this update:     Mon 29 Apr 2024 07:00:55 +0000
Manifest next update:     Tue 30 Apr 2024 07:00:55 +0000
Files and hashes:         1: 1LOfyKU74dxnS22nVehhEJUhdOQ.crl (hash: EfplXn/Lg2Fcy7VKL8JWNZKb+rKkoK2Abvl8bTztAVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:28:a8:15:7b:6a:83:7c:d6:27:c4:f7:a2:95:6d:6e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
        Validity
            Not Before: Apr 29 07:00:55 2024 GMT
            Not After : Apr 30 07:00:55 2024 GMT
        Subject: CN=54b530f6e9b9c3f2b85e82810b7be53f87741abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:11:0d:90:62:f9:b7:1c:35:bb:11:d3:db:
                    a5:a5:63:fb:bc:e9:3d:a6:b7:ed:01:01:5b:85:d8:
                    8d:83:13:4d:c7:b2:36:fc:af:d5:f7:b4:2e:09:09:
                    aa:c3:a0:4f:1f:09:91:d4:cf:45:ee:b1:6f:fa:85:
                    e5:17:b1:da:a6:6e:e6:5d:ab:35:ba:67:dc:ee:19:
                    7c:92:60:0d:18:ec:96:45:dc:bd:28:1e:13:ad:ee:
                    6b:2f:9d:86:14:28:54:43:3c:e8:58:a2:39:fe:3a:
                    6a:9d:56:5b:f5:7d:fa:9f:0d:03:1f:a4:35:6a:55:
                    ec:0f:18:41:00:e0:31:06:4a:1b:93:d8:44:68:de:
                    ca:11:ac:44:49:e0:09:d6:ad:8f:07:87:ea:91:89:
                    c7:f0:ee:67:7b:f9:27:63:90:7c:19:cb:e2:59:0a:
                    17:ca:95:87:07:fa:ef:6d:10:fa:29:3f:2c:8b:e2:
                    8d:15:fb:1e:03:b0:23:e3:4a:e3:00:a3:42:17:b5:
                    43:36:31:8a:4d:6b:aa:d7:73:b2:f3:00:14:b8:7c:
                    fa:79:26:22:6f:b4:25:8f:fe:49:e7:86:8b:5d:52:
                    79:1a:a9:c3:59:6f:ac:42:03:25:58:77:d0:57:64:
                    7b:46:66:52:f0:13:ce:9c:6c:cc:0b:d2:7a:76:a9:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B5:30:F6:E9:B9:C3:F2:B8:5E:82:81:0B:7B:E5:3F:87:74:1A:BE
            X509v3 Authority Key Identifier:
                keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:6a:b1:f6:c6:05:dd:8d:3e:b2:43:9f:17:b6:1e:34:8a:
         3a:c8:88:ff:84:dc:ac:55:46:10:bf:b1:ae:b8:49:0e:34:4d:
         e0:80:20:2a:16:66:bc:59:7d:8e:a6:3b:47:5b:16:e9:00:62:
         14:1f:42:7b:8a:0a:39:60:52:69:18:6e:30:a5:6a:e6:db:e0:
         da:ba:08:9a:c0:99:65:98:b3:40:02:4a:b9:66:36:2a:be:be:
         ee:f7:7f:28:cb:b5:8f:2e:b3:5c:86:ec:d4:6e:4c:44:ed:2b:
         14:f2:1c:01:a4:42:27:51:a9:bf:48:6f:e5:2c:01:de:8b:0f:
         05:55:f6:91:09:f2:5f:7b:84:9c:e1:0c:18:9d:cc:22:9c:55:
         1d:7c:f6:55:36:1b:ff:8f:cb:db:3d:47:96:65:62:8d:38:2c:
         a4:14:ca:7a:53:ba:f0:ca:a3:f3:a6:ba:d1:16:33:0a:3c:f0:
         f7:b7:81:5d:1f:b7:ee:23:da:ed:57:54:9d:ee:b5:c9:cc:1f:
         56:db:18:66:18:3a:06:10:59:df:41:60:58:ca:de:34:45:51:
         fe:bc:28:25:49:11:ed:97:ab:cd:02:14:13:b2:62:37:d9:b7:
         48:6e:f3:f5:dc:9f:07:bd:b5:30:7d:ae:30:1f:ee:38:48:e6:
         09:ac:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----